Skip to content
OpenAdvisories
Critical DLA-3622-1 1 CVE

axis - security update

Published Oct 17, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 axis 1.4-28+deb10u1

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-40743

    Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService

    ** UNSUPPORTED WHEN ASSIGNED ** When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted …

    Apache Software Foundation Apache Axis axis org.apache.axis:axis Debian Ubuntu Maven